Thomas Tolbert doesnâ€™t own a motorcycle. But when he switched insurance companies earlier this year, his premium almost doubled based on an incident he supposedly had on one, he says.
Tolbert says he traced the bad information to his Comprehensive Loss Underwriting Exchange auto report, a collection of data auto insurers use to approve clients and set premiums. C.L.U.E. reports are generated and sold by LexisNexis Risk Solutions.
Consumers are often urged to regularly check for errors in credit reports from the big three bureaus â€” Equifax, Experian and TransUnion. But you may want to add LexisNexis to the list.Â (For more information on how to do that, check out part 2 of this story.)
The company aggregates and sells consumer data â€” about 150 different reports on people like you. While many data companies have a niche, such as credit or insurance, LexisNexis reports cover numerous aspects of consumersâ€™ financial lives, helping other companies figure out whether to renew your insurance, approve your loan or offer you a job, among others. And, like credit reports from the big three, your LexisNexis file can contain mistakes, such as outdated information or data about someone else, which can adversely affect your finances.
While Tolbertâ€™s report included the two vehicles he and his son drive, it also listed an alleged motorcycle incident probably involving a different Thomas Tolbert. (The other Tolbert could not be located for comment.) According to the report, which Tolbert provided to NerdWallet, the two Tolberts both live in Florida and at one time used the same insurer. They have different middle initials and different home addresses. LexisNexis had seemingly confused their data in whatâ€™s commonly known by industry experts as a â€œmixed file.â€
Tolbert was able to correct his C.L.U.E. report, but he says it came too late for the insurer to lower his premium â€” so he tried to switch companies again. A new insurer initially quoted him about $370 per month for his cars, but soon revised the quote to about $620 because, Tolbert says, he was mixed up with the same individual again.
Tolbert says this situation has forced him to reduce his coverage and go without for a period of time. And the time he spends disputing the mixed file â€” which can feel like a game of whack-a-mole â€” is time he canâ€™t devote to his work in real estate.
The lost time and high premium are â€œtaking money out of my pocket,â€ he says.
A big problem likely to get worse
Errors in consumer reports are a big problem, says Alan Butler, senior counsel for the Electronic Privacy Information Center. â€œThe burden ultimately should not be falling on consumers.â€
People can have their reputations hurt by companies theyâ€™ve never heard of, and often donâ€™t know until the damage is done, according to Michael Rapp, a Kansas City-based consumer attorney whose firm has reached dozens of settlements against LexisNexis and companies like it over more than a decade.
â€œThis is the biggest thing you donâ€™t know anything about,â€ he says.
In a written statement, LexisNexis spokesperson Jennifer Grigas Richman emphasizes that the companyâ€™s data procedures meet or exceed industry and regulatory requirements. â€œWe cannot underscore enough our commitment to accuracy,â€ she says.
But consumer lawyers and privacy advocates worry the problem with mixed files and other data errors is likely to get worse. A Government Accountability Office report in 2013 noted â€œa vast increaseâ€ in the number and types of companies that collect and sell consumer data â€” often called data brokers â€” and suggested Congress consider stronger regulation of the industry, which includes LexisNexis. More than five years later, the regulatory landscape hasnâ€™t changed much, but the industry has continued to grow and evolve.
These days, Rapp says, itâ€™s almost impossible to avoid being tracked by data brokers â€” not just LexisNexis. â€œIf you have a pulse, you have a report,â€ he says.
Data brokers â€œoperate in a legal vacuumâ€ when it comes to many kinds of consumer data, says Dr. Lydia de la Torre, a data protection law professor at Santa Clara University who has worked with companies including eBay and PayPal on privacy issues. Although lawmakers have recently proposed a series of regulations to protect consumers from the industry, de la Torre isnâ€™t optimistic any will pass in the near term.
What they know about you
LexisNexis Risk Solutions compiles much of its information through public records, such as documents from courthouses and government agencies. Buying a home, getting married or registering a business can all show up in public documents and your LexisNexis file.
Going to college is one of the things that can populate your LexisNexis file.
Even if you never do any of those things, going about your life can still create a record that LexisNexis can collect. Going to college, holding a professional license, having a cell phone, registering to vote and using your email to register for a website are just some of the things that can also populate your file. According to the companyâ€™s website, it holds 83 billion public records on 282 million unique identities â€” an average of about 290 records per identity.
It also compiles data from private sources, according to Richman. For some reports, these sources include insurance companies, industry experts say.
â€œIâ€™m really surprised if they donâ€™t know what people had for breakfast,â€ says Kristi Kelly, a consumer law attorney in Fairfax, Virginia, who has argued several mixed-file cases against LexisNexis.
Data brokers like LexisNexis are essentially shopping malls for information, according to Ed DeForest, vice president and senior credit officer at Moodyâ€™s Investors Service. Companies that offer mortgages, insurance or other products can turn to LexisNexis to help determine a consumerâ€™s risk profile.
While this ease of sharing information can streamline the approval process â€” generally a good thing â€” it can also exacerbate the impact of erroneous information. Once a mistake is made, it can efficiently spread from LexisNexis to its clients, including other companies that collect and sell consumer data. And this happens largely hidden from the publicâ€™s view.
For almost two decades, Donald Jaynes says, he received phone calls and mail for a man named Donald Whitehead. (Whitehead could not be reached for comment.) Companies were trying to reach him, wanting payment of bills. Jaynes says he first learned he was being confused with someone else when a credit check was done on him while leasing a car in 1997. He disputed the connection with all three credit bureaus, and Experian responded with a letter saying it had corrected its records. Jaynes doesnâ€™t remember receiving letters from the other bureaus.
But Jaynes says thatâ€™s when the calls and mail started, leading him to spend hundreds of hours following up with the creditors that contacted him and trying to determine the source of their information. Jaynes says he traced the issue to LexisNexis and filed a dispute with the company. He says the calls and mail for Whitehead stopped after that, in 2016 â€” but only temporarily. After believing he had finally fixed the problem, Jaynes says he received another call for Whitehead in August of this year.
Jaynes, who lives in Indiana and worked as a CPA, says he often worried the confusion from his mixed file would prevent him from finding work or financing, despite his own good credit. He later learned, from a collections agent, that his Social Security number differs from Whiteheadâ€™s by a single digit.
While Jaynes and Tolbert have been mixed up with strangers, other consumers have found their data muddled with information from family members.
Freelance writer and digital content strategist Farah Fard says she was unable to access her bank account online on multiple occasions because the security questions didnâ€™t pertain to her, but rather to her twin sister. Fard says she learned LexisNexis was her bankâ€™s information source.
â€œI am just really sick of companies like this acting like itâ€™s just an, â€˜Oh well, oops,â€™ when it has real time consequences for those of us cleaning up these glaring mistakes,â€ she says.
In a written statement, LexisNexisâ€™ Richman declined to comment on Fardâ€™s case or any other, citing privacy concerns.
How mixed files happen
Mixed files can occur when the information provided to LexisNexis is wrong â€” such as if an auto insurer confuses two drivers when sharing its information. But mix-ups can happen even if the information provided to LexisNexis is right.
For example, the insurer that covered both Thomas Tolberts provided a document that showed its records hadnâ€™t confused the two.
Mixed files can occur when an auto insurer confuses two drivers when sharing its information with LexisNexis, but they also happen when the data provided is correct.
So if the insurerâ€™s information was correct, what led to the mix-up?
When LexisNexis doesnâ€™t have â€” or doesnâ€™t use â€” enough information about an individual when running a search, that can result in multiple peopleâ€™s data ending up on one personâ€™s report, according to attorney John Soumilas. The Philadelphia-based consumer lawyer has represented plaintiffs on multiple lawsuits against the company.
For example, Soumilasâ€™ firm won a lawsuit in 2014 representing David Smith, a Michigan man who was initially denied a job after his background check turned up a criminal record belonging to a different David Smith. According to the judgeâ€™s ruling, LexisNexis hadnâ€™t required the employer to provide a middle name.
Lawyers for LexisNexis contested the verdict, arguing that it had no prior notice that its procedures presented a problem, nor did it know of a reasonable alternative matching procedure that it failed to use, according to a court filing. The jury awarded Smith $375,000, but he eventually received about $75,000 in damages, because the trial court found the original damages award was excessive. An appeals decision agreed and found that LexisNexis had not willfully violated its obligations.
â€œThereâ€™s no good reason not to use a Social Security number when itâ€™s available, or a date of birth, or a middle name,â€ Soumilas maintains.
In some cases, LexisNexis includes information even if names donâ€™t match, according to Kelly, the consumer attorney in Virginia.
Kelly says she recently reached a settlement for a client whose car insurance premiums skyrocketed after LexisNexis placed accidents and claims belonging to four other people on her clientâ€™s report. The other peopleâ€™s names were spelled differently from her clientâ€™s, and the birthdates and Social Security numbers didnâ€™t match, either, Kelly says.
Common names can increase the risk for a mixed file at LexisNexis and other similar companies. So can non-Anglicized names, which might not fit neatly into companiesâ€™ matching algorithms, according to Kelly.
James Francis, a colleague of John Soumilasâ€™ who has won settlements against LexisNexisÂ and companies like it for 20 years, complains that LexisNexis seems to view its obligations to accuracy as â€œminimal, at best.â€
LexisNexis spokesperson Richman wouldnâ€™t comment on specific policies and declined to address Francisâ€™ comment, but says that the company undergoes regular audits to ensure legal compliance.
No matter how an error begins, LexisNexisâ€™ wide reach means consumers need to correct any misinformation the company spreads. But, as some consumers have learned, itâ€™s much easier to find an error than to fix one.
Correcting the errors
LexisNexis has a dispute process for people who have found inaccurate or incomplete information on their file. The client of Kellyâ€™s who faced sky-high car insurance rates got her record corrected within a few weeks after filing her dispute.
â€œWe encourage consumers to notify us of potential inaccuracies in their data so that we can further ensure the accuracy of our information,â€ Richman says.
But for some, the process is less straightforward. The first step is to request a copy of your personal report. Fard, the writer, says it took three attempts over eight months to receive hers, after getting conflicting answers from customer service about whether it was possible to dispute the report. Jaynes says he had similar difficulties.
When Fard did finally receive her report, she says it contained her personal information along with data on her sister and her sisterâ€™s boyfriend. She notes that the report had her sisterâ€™s name on it, but it came to Fardâ€™s address.
She says that for her, â€œIt just seems like LexisNexis records are a mutation of information that just snowballs.â€
Fard says she requested changes to her file last March, but as of August, she has yet to receive a response from LexisNexis.
For consumers who have a job offer or an insurance policy on the line, LexisNexisâ€™ dispute process â€” even if it goes smoothly â€” may not be fast enough. Kellyâ€™s client alleged she had to pay more than $1,500 for six months of car insurance â€” more than four times the market rate, according to the initial complaint. Soumilasâ€™ client Smith, whose background check got mixed up with a criminalâ€™s, was temporarily unemployed and was unable to pay his bills, according to evidence submitted at the trial.
In cases like Tolbertâ€™s, a fixed report might not stay fixed, either. It can be difficult to truly solve an error â€œwithout real humans talking to real people and pulling up real records,â€ according to Rapp, the attorney.
And the fact that data brokers often share information makes corrections all the more complicated. You might find that the data broker that distributed an inaccurate report about you doesnâ€™t know where the information came from, says Butler of the Electronic Privacy Information Center.
Scale of problem isnâ€™t known
LexisNexis wonâ€™t say how many mixed files there are. During Smithâ€™s lawsuit, the company contended that during a recent five-year period, it had generated 24 million consumer reports, and that its reports had an overall dispute rate of only 0.2% â€” which would be about 48,000 disputes about multiple issues, including mixed files, during that time. In a 2016 decision on the case, the 6th U.S. Circuit Court of Appeals called this rate â€œremarkably low.â€ Richman would not provide additional detail but called the inclusion of inaccurate data in its reports â€œrare.â€
But these numbers are unlikely to reflect the extent of the problem, says Francis, the attorney. â€œThat only would address the number of people who disputed, not the number of errors that are actually created. And not everybody disputes.â€
A 2004 report by the Federal Trade Commission found that credit reports by Experian, Equifax and TransUnion contain Social Security numbers that are off by a digit or two about 1% to 2% of the time. A 2012 follow-up report found that, for credit reports with disputed collection information, data that didnâ€™t belong to the consumer was alleged in 84% of cases. About 40% of those consumers were unable to find a resolution after a dispute, the FTC reported.
Accusations of incorrect information make up more than half of the credit or consumer reporting complaints the Consumer Financial Protection Bureau receives, according to a 2018 report.
And mixed files are a common problem Kelly sees in her cases with data brokers. She says a lot of her clients end up suing â€œthe same consumer reporting agencies, including LexisNexis, over and over for the same violations because they donâ€™t correct them.â€
Operating in the â€˜Wild Westâ€™
Complicating matters is the lack of federal regulation of consumer data. The Fair Credit Reporting Act, which entitles you to free annual reports and prompt resolution of disputes, among other things, applies to some LexisNexis reports, but not all. There is no comprehensive federal regulation covering the data broker industry â€” just a few state laws and some federal statutes regulating particular types of consumer data, many dating from the 1990s and earlier.
Lawmakers have proposed regulations in the past year that would affect data brokers, including laws that would expand FCRA protections, allow more thorough consumer opt-outs and levy stricter penalties on executives of companies found to be violating the rules. But Santa Clara Universityâ€™s de la Torre doesnâ€™t think any will be passed in the next couple of years because of other government priorities.
For now, many companies are operating â€œin the Wild West, and they just do whatever they want,â€ says Francis, the consumer lawyer.
Even on reports that are governed by the FCRA, Francis contends that companiesâ€™ practices for data retrieval can fall short of the FCRA standard, which requires credit reporting agencies to maintain â€œmaximum possible accuracyâ€ in their data.
LexisNexisâ€™ Richman counters that the company is in strict compliance with the FCRA. â€œWe strive to achieve the highest precision rate possible,â€ she says.
In the 6th Circuit Courtâ€™s 2016 decision on the Smith case, the panel noted, â€œA reasonable jury could conclude that Lexis negligently violated the FCRA by not requiring Smithâ€™s middle name.â€ The appeals court affirmed the Michigan district court decision, which called the deficiencies in LexisNexisâ€™ matching procedures â€œglaring.â€
But the 6th Circuit also declined to uphold a portion of the damages the lower court awarded Smith, in part because the panel held that there was evidence LexisNexisâ€™ procedures met or exceeded industry standards.
â€œIâ€™m sure that the big companies spend a lot of money on compliance,â€ EPICâ€™s Butler says. â€œThat doesnâ€™t really provide much comfort if thereâ€™s still significant errors going on.â€
And the errors we know about, Butler adds, are just â€œthe tip of the iceberg.â€
Tolbert is still fighting
Rather than attempt the traditional dispute process with LexisNexis again, Tolbert says, he served it with an intent to file suit. As of June, he said he had not received a response.
â€œI just want this matter resolved, and I want it to stay resolved,â€ Tolbert says. â€œ[They] need to learn [they] canâ€™t just do this to people and walk away.â€
More From NerdWallet
- How to See What 5 Data Reports Reveal About You
- The 3 Credit Bureaus Matter a Lot to You â€” Here’s Why
- Every Claim You Make, Insurers Are Watching You
Alice Holbrook is a writer at NerdWallet. Email: firstname.lastname@example.org
The article Are You Paying for Someone Elseâ€™s Mistakes? This Companyâ€™s Mix-Ups Could Be Scrambling Your Finances originally appeared on NerdWallet.